Group-IB and NyxLab have tied more than 70,000 exposed credentials for Fortinet FortiGate, FortiWeb and Palo Alto Networks GlobalProtect devices to a threat actor tracked as k0t. This FortiWeb credential leak comes with no CVE to patch, so the fix is in your accounts, sessions and logs, not your firmware update queue.
